Keep on rating – on the systematic rating and comparison of authentication schemes
Information and Computer Security
ISSN: 2056-4961
Article publication date: 20 June 2019
Issue publication date: 23 October 2019
Abstract
Purpose
Six years ago, Bonneau et al. (2012) proposed a framework to compare authentication schemes to the ubiquitous text password. Even though their work did not reveal an alternative outperforming the text password on every criterion, the framework can support decision makers in finding suitable solutions for specific authentication contexts. The purpose of this paper is to extend and update the database, thereby discussing benefits, limitations and suggestions for continuing the development of the framework.
Design/methodology/approach
This paper revisits the rating process and describes the application of an extended version of the original framework to an additional 40 authentication schemes identified in a literature review. All schemes were rated in terms of 25 objective features assigned to the three main criteria: usability, deployability and security.
Findings
The rating process and results are presented along with a discussion of the benefits and pitfalls of the rating process.
Research limitations/implications
While the extended framework, in general, proves suitable for rating and comparing authentication schemes, ambiguities in the rating could be solved by providing clearer definitions and cut-off values. Further, the extension of the framework with subjective user perceptions that sometimes differ from objective ratings could be beneficial.
Originality/value
The results of the rating are made publicly available in an authentication choice support system named ACCESS to support decision makers and researchers and to foster the further extension of the knowledge base and future development of the extended rating framework.
Keywords
Acknowledgements
The research reported in this paper was supported by the German Federal Ministry of Education and Research (BMBF) and the Hessen State Ministry for Higher Education, Research and the Arts within their joint support of the National Research Center for Applied Cybersecurity. This work was further supported by the German Federal Ministry of Education and Research in the Competence Center for Applied Security Technology (KASTEL).
Citation
Zimmermann, V., Gerber, N., Mayer, P., Kleboth, M., von Preuschen, A. and Schmidt, K. (2019), "Keep on rating – on the systematic rating and comparison of authentication schemes", Information and Computer Security, Vol. 27 No. 5, pp. 621-635. https://doi.org/10.1108/ICS-01-2019-0020
Publisher
:Emerald Publishing Limited
Copyright © 2019, Emerald Publishing Limited